Recommended Router and Firewall Settings
Explore the settings and parameters to configure to ensure your router and firewall devices are ready for VoIP services.
Written by Adrian Angwenyi
Updated at August 11th, 2023
Table of Contents
General Configuration
WARNING: It is recommended to consult your IT, MSP (Managed Service Provider), or another network professional when configuring advanced network settings or devices.
While resolving any network issues, we also recommend that Bandwidth Management/Traffic Shaping policies prioritizing VoIP traffic are configured and tested on your router/firewall.
Settings to Disable
- SIP ALG (Application Layer Gateway) functions such as SIP Transformations, SIP Application Helpers, SIP Normalization, etc..
- SPI (Stateful Packet Inspection)
- AV Client Enforcement on any IP assigned to a phone
- Content Filtering on any IP assigned to a phone
Settings to Enable
- Bandwidth Management/Traffic Shaping (See below for a list of our network blocks and bandwidth requirements)
- Default UDP session timeout to 300 seconds
- Consistent NAT (Sonicwall)
- Load balancing policy configured for ingress and egress of phones on same WAN interface only. (If applicable)
- Inbound and outbound traffic on ports and subnets listed below
- DNS resolution for the phones
Subnet and Port Configuration
SpectrumVoIP Public Subnets
- 199.71.209.0/24
- 24.227.249.0/25
- 72.249.136.32/28
- 206.123.122.32/27
- 212.69.157.32/27
- 40.143.31.64/27
- 45.51.5.0/24
Ports - Stratus Platform
- 5060-5062 UDP - SIP
- 20,000-40,000 UDP - RTP
- 80, 443 TCP - HTTP/HTTPS
- StratusMEETING - TCP and UDP
- 54.188.133.147:3443
- 3.130.158.184:3443
- 35.183.150.146:3443
- Text To Speech Services - TCP and UDP
- 54.149.243.27:8000
- 35.175.185.150:8000
- 54.149.243.27:3001
- 35.175.185.150:3001
- StratusWEB PHONE
- 9002 - TCP - websockets
- Portal Dynamic Updates
- 8001 - TCP
Ports - Enswitch 1 and 2 Platforms
- 5060-5062 UDP - SIP
- 10,000-20,000 UDP - RTP
- 80, 443 TCP - HTTP/HTTPS
DHCP VLAN Option
Option 132: Set Voice VLAN ID
- This only works for yealink brand phones and needs to be made as a custom option on the DHCP Server.
- Type = String (ASCII)
- Value = 'VLANTAG' for example '20' for VLAN 20
- This DHCP option should be applied to your native DHCP sever so that the phones receive the configuration when first plugged in.
- It may also be applied to the voice VLAN, but is not required.
Bandwidth Requirements
Voice-only applications utilize G.711 U-Law as the primary codec and require 87.2 Kbps of bandwidth per active call. We've found a good rule of thumb is to round the requirement up to 100Kbps to account for signaling and overhead.
For example…
A 10Mbps/1Mbps ISP connection that is solely dedicated to the phones would support 10 concurrent phone calls.